Azure monitoring and alerting

Question

What is everyone using for proper alerting and notification into a ticketing system as well as sms page out for oncall purposes. I work on a team that believes checking email continuously is a one all solution and trying to gauge what everyone is doing/using to better respond to issues - in a sense better positioned to be proactive.

Answer 1

Hi,
Best is to forward these alerts into ITSM system and create incidents out of them. Incidents allows you follow trough the whole cycle from the beginning of the problem to its resolution. Action groups offer integration with a few ITSM systems by ITSM connector. You can of course write your own integration if the ITSM system has some API by calling the API directly via automation service like Logic app, function or automation runbook. From the ITSM system you can set some additional notification via systems like Pager Duty. Of course you can make your action group in a way that both creates incident in ITSM and in the same time uses Pager Duty for notification.

I hope that answers your question.

Answer 2

@Crod I'm not sure what you're request is. Are you asking for what sort of alert/notification system is being suggested for a ticketing system? These forums are meant for Azure related issues.

Azure monitoring specifically is building out rules to set alerts/notifications. Per the docs, Azure Alerts supports voice, sms, and email : https://learn.microsoft.com/en-us/azure/azure-monitor/platform/alerts-rate-limiting

This is what is supported, but what is a better notification system is a philosophical question, and if you have a better suggestion please submit it against the feedback forums here : https://feedback.azure.com/forums/231545-diagnostics-and-monitoring

Answer 3

Hi, I previously experienced the exact same scenario as Stan describes.
Alerts, triggered by servers (high CPU usage, Disk storage capacity, etc.) were sent to the ITSM system, where actions (daily tasks) were automatically created.
The responsible system engineer was automatically alerted, and had a hard deadline to resolve these issues, and prevent outages.
KR,

Answer 4

My team uses Azure Monitor Alerts, so recently I started pushing AAD Connect Run Profile Results to Azure Monitor Logs (formerly Log Analytics I think). Getting alerts is one thing, investigating them is another, and I really like the ability to query over run profile results using Kusto. We've only been doing it for a few months but it's working out pretty well so far.